CVE-2025-2833 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been classified as problematic. Affected is an unknown function of the component HTTP Header…
Medium CVSS: 6.9

CVE-2025-2833

A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been classified as problematic. Affected is an unknown function of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to inefficient regular expression complexity. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Vendor
Zhyd
Product
Oneblog
CWE
CWE-400
Yayın Tarihi
2025-03-27 04:15:23
Güncelleme
2025-04-01 15:43:23
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-400 Oneblog MEDIUM Zhyd 2025

Referanslar

https://github.com/zhangyd-c/OneBlog/issues/35 https://github.com/zhangyd-c/OneBlog/issues/35#issue-2914268214 https://vuldb.com/?ctiid.301470 https://vuldb.com/?id.301470 https://vuldb.com/?submit.521813 https://github.com/zhangyd-c/OneBlog/issues/35 https://github.com/zhangyd-c/OneBlog/issues/35#issue-2914268214